cd: correctly find workspace.dependencies-declared dependencies and their Cargo.toml

[ggawryal]

I've decided to pick up #5865 as fixing the issue is quite urgent for my project. Added some more code to fetch [workspace.dependencies] from the root manifest, because extending required_path? function was not sufficient. Added a test as well - previously running dependabot on the repository I've attached to the test was finishing with a failure.

Closes #5864.

[jeffwidman]

Thanks for picking this up!

Added some more code to fetch [workspace.dependencies] from the root manifest, because extending required_path? function was not sufficient

Ah, that explains why I kept running into problems when I'd tried to write the test myself.

I'm about to walk out the door to go camping, so hopefully someone else on the team can take a look... but if not, I'm happy to take a look next week. If you don't hear from someone by Wednesday, feel free to leave a comment and tag me by name as a reminder.

[Nishnha]

This looks great!

I'm not sure why the one Updater test is failing but it's not related to these changes.

I also looked at the test repo and although it differs slightly from what's described in #5864, it looks correct.

Also, the requests to the test fixtures are all stubbed out so it's okay to reference the test repo 👍🏾

[Nishnha]

This is now in production.

[ggawryal]

That's a great news, many thanks for your support!

[abdulapopoola]

Thanks for helping to make better @ggawryal !